> They would be harder to hack because they are not part of the tareted BigCos right? Not neccessarily. A lot of totally unknown installs get hacked all the ti

> They would be harder to hack because they are not part of the tareted BigCos right? Not neccessarily. A lot of totally unknown installs get hacked all the time (cf. random WP blogs) by script kiddies who scan thousands of adresses trying to find a few to get into. They don't care you're not a BigCo and that your server is in your basement. And if you're taking care of that server yourself (and assuming you do have other things to do in your life), you're likely to miss some security upgrade, and might leave a hole open just enough for someone to accidentially stumble into. I presume having the server only accessible through a VPN, and configuring all your devices (laptops, tablets, phones) might do the trick, but that's a bit pushing it.